Conversation
There was a problem hiding this comment.
Code Review
This pull request upgrades gRPC from v1.58.0 to v1.60.0. A security review found no vulnerabilities. However, the existing patches applied to gRPC appear to be incompatible with the new version. At least two of the three patches will fail to apply due to significant changes in the upstream gRPC code, which will likely cause the build to fail and needs to be addressed.
| url = "https://github.com/grpc/grpc/archive/refs/tags/v1.60.0.tar.gz", | ||
| sha256 = "437068b8b777d3b339da94d3498f1dc20642ac9bfa76db43abdd522186b1542b", |
There was a problem hiding this comment.
While the gRPC version and SHA256 are correctly updated, the associated patches have not been validated against the new version. My analysis indicates that at least two patches are no longer compatible and will cause build failures:
grpc-zlib-fdopen.patch(line 284): Thezlibdependency ingrpc'sbazel/grpc_deps.bzlhas changed, making this patch obsolete.grpc-configurable-thread-count.patch(line 285): The target filesrc/core/lib/gpr/linux/cpu.cchas been significantly refactored.
Please update or remove these patches to be compatible with gRPC v1.60.0.
Align grpc companion dependencies for this release and keep Ray Bazel dependency fetch/load working on this branch. Signed-off-by: Rueian Huang <rueiancsie@gmail.com>
2e18e2a to
6e2e62d
Compare
Description
Related issues
Additional information